Privacy Policy

1. Overview

ChoreHub ("ChoreHub," "we," "us," or "our") is a household chore-management app operated by Keith Fisher, an individual doing business as ChoreHub, based in Ohio, USA. This Privacy Policy explains what information we collect when you use chorehub.net and the ChoreHub app (together, the "Service"), why we collect it, and what control you have over it.

2. Information we collect

We collect information in three ways: what you give us directly, what's generated as you use the Service, and what a small number of service providers collect on our behalf (see Third-party services).

Account information (parent/household admin)

• Email address and password (stored as a salted hash — we never store your password in plain text)
• Household name and settings you configure, and a household street address if you choose to add one (it's optional and isn't used for marketing or shared with anyone)
• Email addresses of people you invite (a co-parent, a Trusted Household, or a family you refer), which we use only to send that invitation

Family member profiles

Every profile in a household — parent or child — is created and managed by the household's account holder. Child profiles are not separate accounts signed up by the child; a parent creates them and typically only needs to supply:

• A username and, optionally, a display name
• A PIN chosen by the parent for that profile (child profiles generally do not require an email address)
• Chore, points, badge, and allowance data generated as the profile is used

Chore and activity content

• Chores, due dates, point values, and bonus amounts a parent sets up
• Chore submissions, approvals, rejections, and notes
• Photos uploaded to satisfy a "photo-proof" chore requirement, where that feature is enabled by a parent
• Rewards, redemptions, and badge/streak progress

Household connections ("Trusted Households")

If a parent chooses to connect with another household, we store which households are connected, which specific kid profiles the parent has made visible to that connection, and the invite email address used to set it up. A parent can end this connection at any time, and can toggle visibility per child.

Billing information

If you subscribe to ChoreHub Plus, payment is handled entirely by our payment processor, Paddle. We never see or store your full card number. We retain only your Paddle customer/subscription identifiers and subscription status (active, canceled, etc.) so the app knows what plan your household is on.

Payment handles for allowance payouts (ChoreHub Plus)

ChoreHub Plus lets a parent optionally save a kid's Venmo, PayPal, or Cash App handle (a username, "paypal.me" link, or cashtag) so that confirming a weekly payout can pre-fill the amount and open that service's app or website. We store only that handle and the amount it was used to pre-fill. ChoreHub never processes the payment, never connects to Venmo/PayPal/Cash App's own systems, and never sees or stores any transaction data — the payment itself happens entirely within that third-party service, under its own terms.

Device and usage information

• Push notification delivery details (if you enable notifications) — a browser subscription or, in the Android app, a device token — used solely to deliver chore/approval alerts to that device
• Basic technical logs (IP address, browser/device type, timestamps), including sign-in attempts, for security and troubleshooting
• Paired devices: when a parent pairs a child's phone or tablet, we store a random device key and the device's browser/app identifier (its "user agent," which names the device type and browser) so the parent can see and remove paired devices
• How you found us: if you arrived at signup from a link carrying campaign tags (for example, utm_source and utm_campaign), we record those two tags on your household so we can tell which channels bring families to ChoreHub. We don't use them to track you anywhere else.

Support requests

If you contact us through the in-app support form, we receive your message, the contact email you give, your household and username, and any screenshot you attach. For technical problems, the form also includes a short excerpt of recent app and server error logs from around the time of the problem, so we can find the cause. These are visible only to us.

Referrals ("Give a month, get a month")

If you share your invite link and another family signs up with it, we record that connection. When they pay for their first month of Plus, we let you know by email, using their household name.

Biometric sign-in (passkeys)

ChoreHub supports signing in with a passkey — using a device's own fingerprint, face, or screen-lock as an alternative to typing a password or PIN. ChoreHub never receives, transmits, or stores any fingerprint, face scan, or other biometric data. That verification happens entirely on your device, through your device's own operating system. All ChoreHub ever stores is a cryptographic public key (standard to the passkey/WebAuthn technology) that lets us confirm a sign-in was performed by a device you already registered — the private key, and any biometric data behind it, never leaves that device.

Device calendar information (ChoreHub Plus, Android app only)

If a household turns on Smart Calendar, the ChoreHub Android app can read the calendars already on a phone, with that phone's explicit permission, to warn a kid when a chore's due date falls on a busy day. We've kept what this actually collects narrow:

• The names of the calendars on that device (for example, "Family" or "Work"), so a parent can choose which ones should count — stored against that person's profile.
• For each connected calendar, only whether a given day already has a long (4+ hour) event on it — we do not read, transmit, or store event titles, descriptions, locations, or attendees, and never send full event details to our servers.

A kid's device only ever reports its own calendars — it doesn't read or receive anyone else's. A parent's own connected calendar additionally contributes a household-level "this day is busy" signal that every kid's conflict check considers, again without any event detail beyond the date itself leaving the device.

3. Children's privacy

ChoreHub is built for families, so children do use it. This section explains exactly how, and what control parents have.

How children use ChoreHub

• Parents create every child profile. Children can't sign up on their own. Only an adult account holder can create a household and add a child to it, and only a parent chooses the child's username, display name, and PIN.
• Children sign in on their own devices. A child signs in to their parent-created profile with that PIN, or on a phone or tablet the parent has paired to the profile, or with a passkey (fingerprint or face unlock, which stays on the device; see passkeys above). No email address is needed for a child.
• What children create. Children mark chores done and, when a parent turns on photo-proof for a chore, take or upload a photo to show it's done. Those photos may include the child or their surroundings. Children can also redeem rewards a parent has set up.
• Notifications. If notifications are turned on for a child's device, we use that device's push token or browser subscription only to send chore reminders and updates to it.
• Smart Calendar. If a parent turns on Smart Calendar (ChoreHub Plus) and a child connects calendars in the Android app on their own phone, the app reads that phone's calendar list and which days have long events, as described in Device calendar information. Event details never leave the phone.

What we don't do with children's information

• No ads, no advertising profiles, and no third-party tracking or analytics in the app.
• No public profiles, no chat with people outside the family, and no way for strangers to find or contact a child.
• We never sell children's information, and we share it only as described in this policy: with the child's own household, with a Trusted Household only for children a parent has made visible to it, and with the service providers that run ChoreHub for us.

Parental control

• A parent can see everything a child's profile contains (chores, submissions, photos, points, and payouts) and can edit it.
• A parent can delete a chore (which deletes its submissions and photos), delete a child's whole profile (which deletes that child's chore history, submissions, and photos), or delete the entire household, at any time in the app.
• A parent can unpair a child's device, turn off photo-proof and Smart Calendar, and control which children any Trusted Household can see.
• A parent can ask us at privacy@chorehub.net for a copy of their child's information or for its deletion.

If you believe we have information about a child that didn't come through a parent-managed household, contact us at privacy@chorehub.net and we will investigate and delete it.

4. How we use information

We use the information described above only to operate, maintain, and improve the Service, specifically to:

• Create and secure household and profile accounts, and authenticate logins
• Run the core features of the app: assigning, tracking, approving, and paying out chores, points, badges, and rewards
• Send transactional emails (invites, password resets, account and subscription notices) and, if enabled, push notifications. Payment receipts come from Paddle.
• Process and manage ChoreHub Plus subscriptions
• Maintain the security and integrity of the Service, and prevent abuse
• Respond to support requests
• Understand, in aggregate, which marketing channels bring families to ChoreHub (see "How you found us" above)

We do not use your family's data to serve ads, and we do not build advertising profiles from it.

5. How we share information

We do not sell personal information — yours or your children's — to anyone, ever. We share information only in these limited circumstances:

• With your household: data you enter is visible to the parent/admin account(s) on your household, as designed.
• With a Trusted Household you connect to: only for the specific children a parent has made visible, and only for as long as that connection is active.
• With service providers who process data on our behalf to run the Service (listed in Third-party services below), under obligations to protect it.
• For legal reasons: if required to comply with a valid legal process, or to protect the rights, safety, or property of ChoreHub, our users, or others.
• In a business transfer: if ChoreHub is ever involved in a merger, acquisition, or sale of assets, information may transfer as part of that deal, subject to this policy (or a policy offering at least equivalent protections).

6. Third-party services we use

These providers process a limited slice of data strictly to help us run the Service — none of them are permitted to use it for their own marketing purposes:

Provider	Purpose	What they see
Oracle Cloud Infrastructure	Hosts ChoreHub's application servers and database (United States)	All Service data is stored on these servers; Oracle provides the infrastructure and does not access or use the data for its own purposes
Paddle	Subscription billing, as merchant of record	Billing/payment details for Plus subscribers; your email and household ID
Resend	Transactional email delivery (invites, password resets, account notices)	Recipient email address and message content
Cloudflare	Content delivery, DDoS protection, and secure tunneling to our servers; Turnstile bot protection on the signup form; Web Analytics on chorehub.net	Standard network/request metadata; for Turnstile, browser and device signals used only to tell people from bots during signup; for Web Analytics, aggregate page-view counts with no cookies and no individual visitor profiles
Google	Push notification delivery to the Android app (Firebase Cloud Messaging), optional "Sign in with Google," and passkey sign-in (Android Credential Manager)	A device token used only to route notifications to that device; your Google account email if you choose to sign in with Google; a cryptographic public key for passkey sign-in — never any biometric data
Google Play	Distributes the Android app. When a parent in the U.S. starts a ChoreHub Plus purchase from the Android app, Google Play's External Content Links program requires us to report the resulting transactions to Google	For those subscriptions only: transaction amounts, tax, dates, country (U.S.), renewals, plan changes, and refunds, linked by a token Google issued when the purchase started. We don't send your name, email, or family data. Google's own privacy policy covers your use of Google Play.
Browser push services (Google, Apple, Mozilla, Microsoft)	Delivering notifications when you use ChoreHub in a web browser or as an installed web app	An encrypted notification sent to your browser's push service, which only it can route to your device; the message content is encrypted so the push service can't read it

We also keep encrypted backups of the database and uploaded photos on a second server we operate ourselves (see Data retention).

7. Security

We use industry-standard measures to protect your information, including encrypted connections (HTTPS) between your device and our servers, salted password hashing, and access controls that limit who can reach production data. Parents can also enable two-factor authentication, and anyone in the household can set up passkey sign-in (see Information we collect above) as a phishing-resistant alternative to a password or PIN. No method of transmission or storage is 100% secure, so we can't guarantee absolute security — but we work to keep your family's data protected and will notify affected users if we become aware of a breach that puts your information at risk, as required by law.

8. Data retention

We retain household and profile data for as long as the household account is active. If you delete a child profile or close your household account, we delete the associated personal data promptly, except where we're required to retain limited records (for example, billing records) to comply with legal, tax, or accounting obligations.

Photos submitted for photo-proof chores (including any marked-up rejection photos) are automatically and permanently deleted from our servers 2 years after they're submitted. This is a fixed, automatic process to limit how long images are retained — it doesn't affect the rest of your household's chore history, badges, or points.

Backups. We make a backup of the database and uploaded photos every night and keep each one for 14 days, on our main server and, encrypted, on a second server we operate. Backups aren't edited after they're made, so information you delete stays in them until they expire: anything deleted from ChoreHub is gone from every backup within 15 days. We use backups only to recover from a technical failure.

9. Your rights and choices

You can access, correct, export, or delete most of your household's information directly within the app. You can also contact us at privacy@chorehub.net to request that we:

• Provide a copy of the personal information we hold about you or your child's profile
• Correct inaccurate information
• Delete your household account and associated data
• Answer questions about how your data is handled

If you are located in the European Economic Area, UK, or California, you may have additional rights under applicable law (such as the GDPR or CCPA); we will honor valid requests from any user consistent with those laws regardless of where you live.

10. Cookies and tracking

The ChoreHub app uses only the browser storage needed to keep you logged in and remember basic preferences. It has no analytics, advertising cookies, or cross-site trackers.

• Signup bot protection. The signup form uses Cloudflare Turnstile to check that a person, not a bot, is signing up. Turnstile may set a cookie or read browser signals for that check only; it isn't used for advertising or tracking.
• Website analytics. Our marketing site, chorehub.net, uses Cloudflare Web Analytics to count page views in aggregate. It sets no cookies, doesn't fingerprint visitors, and doesn't build profiles of individual visitors.

11. Changes to this policy

We may update this Privacy Policy from time to time as the Service evolves. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify account holders directly (for example, by email). Continued use of the Service after a change takes effect means you accept the updated policy.

12. Contact us

Questions, requests, or concerns about this policy or your data? Reach us at privacy@chorehub.net.